1169979 - crash in mozilla::dom::workers::XMLHttpRequest::Open(nsACString_internal const&, nsAString_internal const&, bool, mozilla::dom::Optional<nsAString_internal> const&, mozilla::dom::Optional<nsAString_internal> const&, mozilla::ErrorResult&)

Status: RESOLVED DUPLICATE of bug 1169867

(Core :: General, defect)

Description

[Alice0775 White]

This bug was filed from the Socorro interface and is 
report bp-119076da-e55c-4606-8414-64ff52150531.
=============================================================

Crash while navigates Google Maps

Comment 1

[Boris Zbarsky [:bzbarsky]]

[Tracking Requested - why for this release]: Regression causing crashes.

This is a regression from bug 1166924.

In particular, this bit in XMLHttpRequest::Open:

   if (!runnable->Dispatch(mWorkerPrivate->GetJSContext())) {
     ReleaseProxy();
     mProxy->mOpening = false;

will cause a null-deref crash if reached, since ReleaseProxy sets mProxy to null, right?

Comment 2

[Boris Zbarsky [:bzbarsky]]

[Tracking Requested - why for this release]: Looks like bug 1166924 got backported to various branches....

Comment 3

[Andrea Marchesini [:baku]]

You are right. I already fixed this bug in another bug.